Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Fantastic service”
Google Play · 5/5 · 2025-06-30

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2541942774

Proof data

Record hash (SHA-256): a113ad40cae89a2e718e5928913249338a7c68418640e5cb7cd14be2324dcae3
Signature (Ed25519, base64): GdAUdiHYgt4O6SAobrZ6oaXOUd3rGP3LOCnWZga98cEEoD9zUEH5p7nkTRwuel6Iq+ghUgDYPmgq+AFUocfcDQ==
Merkle root: 0fdf8a945cf322eba60395065bdb38bb3eeb32c52e065b6c93c48bb56aa3bb91
Merkle path: ["a117e509d0ed66d31b5bd85a8467d9d5c59d475df57a1ba4f4a34bab62db2519","523e20503ed878f9594029f88ae285c78e2936a3b15626497b5bf70fbb2e1670","4b1790cf03dff3f12e1d47faedce737447860951eebc40c2c35f2b7cbf2d9d92","54f072e157a6bfe03d32950698e317a0ddb9101c9cb4c80e5f8b8c0212df1856","1a0a8187e501204fe7350b33f6792d5c6b9de0fc9869b6a16acf6c58e52a045a","b9cf0d0420e3858f0b04b494fd8ee091427eed8a553197ef33e8160cfa22ad61","9a7e4e024d7ca9ecbf672ee7b53fc442f5016ea9f591295f59dd8c16476b0127","2de51587e245299a3ba579cb8cc106f60f638e872af45c67476f3b102f8b11fa","ecaba84227b5b98d2cce1ef5d9e538af1b466ad0abc17f9a441d80b97abf7d9e","873e89f77676defef92dc36aae044f331083a8a4b4b1f9771f12d9dbb75445dc","f9f324e1732de38758d7a95f652f45f0abd27a21f45da972f03436967b7724c2","6fc1553d970cb3977c06051a4f79653ae7d462edfc236ec237e5117cf0caa08d","35e532d6ab241daaf8e55aad2fae9ab09803278b73b0b4941e8a8e444e6c4d11","e612bf3863a4ca6db004d49df9b16b869da6bd7612ef55762e23c722f5ffdfff","31e60baa9fb8f672f686fd126d7dc82498bbfeaa38bc676e67691bf1c2c7c210"]
Anchored: 2026-08-21
Public log entry: search.sigstore.dev, log index 2541942774 · entry 108e9186e8c5677ae0bd…
Expected log hash: 4825ba618d3c3368179be13912e101812df871de37f30b1ec256ca6d987713ec The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787277864570","kind":"published-quote","locale":"en","page":"theme:storytel/service/en","quote":"Fantastic service","rating":5,"review_date":"2025-06-30","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=grit.storytel.app","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (0fdf8a945cf3…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.